“An attacker could create a specially crafted Microsoft Office document that enables them to perform remote code execution in the context of the victim,” reads the advisory published by Microsoft.